Kibana can with other geoip with create maps?

Elastic Stack Kibana
1

kibana can with other geoip with create maps(Select buckets type)?

the is only Geo coordinates
image

i add the ip2location filter with logstash the data is also in es 5.6.8 how can use it? there is only can choose geo can't use ip2location.

image
image.png576×616 27.1 KB

2

slove it with add the mapping with ip2location
"ip2location": {
"dynamic": true,
"properties": {
"location": {
"type": "geo_point"
},
"ip": {
"type": "ip"
},
"continent_code": {
"type": "text"
},
"country_name": {
"type": "text"
}
},
"type": "object"
},
it know can choose the ip2location.location
image

3

when create the map. can't show data about it. how can do it?
image
with geoip.location can show it.

image
image.png1200×424 21 KB

4

Please show an example document and the full mapping, as that will make it easier to see what is going on.

5

@Christian_Dahlqvist the mapping is thanks.

  "mappings": {
    "docs": {
      "properties": {
        "113": {
          "type": "float"
        },
        "114": {
          "type": "float"
        },
        "115": {
          "type": "float"
        },
        "geoip": {
          "dynamic": true,
          "properties": {
            "location": {
              "type": "geo_point"
            },
            "ip": {
              "type": "ip"
            },
            "continent_code": {
              "type": "text"
            },
            "country_name": {
              "type": "text"
            }
          },
          "type": "object"
        },
        "ip2location": {
          "dynamic": true,
          "properties": {
            "location": {
              "type": "geo_point"
            },
            "ip_address": {
              "type": "ip"
            },
            "continent_code": {
              "type": "text"
            },
            "country_name": {
              "type": "text"
            }
          },
          "type": "object"
        },
        "@version": {
          "type": "integer"
        },
        "tcpflag": {
          "type": "integer"
        }
      }
    },
    "_default_": {
      "_all": {
        "enabled": true
      },
      "dynamic_templates": [
        {
          "date": {
            "match_pattern": "regex",
            "mapping": {
              "type": "date"
            },
            "match": ".*_time"
          }
        },
        {
          "ipv4": {
            "match_pattern": "regex",
            "mapping": {
              "type": "ip"
            },
            "match": ".*_ip"
          }
        },
        {
          "ipv6": {
            "match_pattern": "regex",
            "mapping": {
              "type": "ip"
            },
            "match": "dst_ipv6"
          }
        },
        {
          "ip_ver": {
            "match_pattern": "regex",
            "mapping": {
              "type": "byte"
            },
            "match": ".*_ip_ver"
          }
        },
        {
          "port": {
            "match_pattern": "regex",
            "mapping": {
              "type": "integer"
            },
            "match": ".*_port"
          }
        },
        {
          "other": {
            "mapping": {
              "omit_norms": true,
              "type": "text"
            },
            "match_mapping_type": "string",
            "match": "*"
          }
        }
      ]
    }
  },
6

Can you also show a sample document?

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.